summaryrefslogtreecommitdiff
path: root/hosts/ahmed
AgeCommit message (Collapse)Author
2025-03-16ahmed: Prevent old generations from filling /bootLinnnus
2025-03-16ahmed: Move torrenting webuis to local-only DNS viewLinnnus
2025-03-16ahmed: Add local DNS resolverLinnnus
2025-03-13ahmed: Improve ordering of linus.onl-source.serviceLinnnus
2025-03-13ahmed: Remove minecraft-log-serverLinnnus
2025-03-13ahmed: Add basic fail2banLinnnus
2025-02-16ahmed/minecraft-log-server: Fix missing ACME certificatesLinnnus
2025-02-06ahmed/minecraft-log-server: Show more previous messagesLinnnus
2025-02-02ahmed/minecraft: Make SneakyPanda moderator, set spawn protectionLinnnus
2025-02-02ahmed/minecraft-log-server: InitLinnnus
2025-02-02ahmed/minecraft: Update whitelistLinnnus
2025-01-31ahmed/minecraft: Add XenoDK to whitelistLinnnus
2025-01-29on-demand-minecraft: Add ops listLinnnus
2025-01-29ahmed/minecraft: Add whitelistLinnnus
2025-01-29ahmed: Factor configuration.nix into smaller submodulesLinnnus
I checked that this didn't result in any (non-trivial) changes like so: $ vi hosts/ahmed/configuration.nix $ nixos-rebuild build --flake .#ahmed $ nix-diff /run/current-system ./result
2025-01-29on-demand-minecraft: Add data-dir optionLinnnus
2025-01-29ahmed: Don't auto-bump nixpkgs-unstable, don't write lockfileLinnnus
2025-01-29Bump nixpkgs-unstable, ahmed: use unstable PaperMCLinnnus
I needed PaperMC v1.24.1 which happens to be what is packaged in NixOS/nixpkgs@852ff1d9e. I really ought to figure out a way to decouple the version of Minecraft from the nixpkgs version. I don't want to be in the situation where I want to bump unstable, but don't want to switch to a new Minecraft version.
2025-01-29ahmed: Set Minecraft world seedLinnnus
2025-01-23linus.onl: Clone full git history when building siteLinnnus
Since the build script uses commit dates to infer authoring dates, a shallow clone makes all posts appear to have been published at the time of the most recent commit.
2025-01-18Move NixOS-specific options from shared/{nixos-and-darwin => nixos}Linnnus
2025-01-05hosts/ahmed: Remove duksebot pt. 2Linnnus
Don't know how I managed to not catch this in c7a5082.
2025-01-05hosts/ahmed: Change qBittorrent passwordLinnnus
2024-12-27Move shared nix{os,-darwin} config to shared/nixos-and-darwinLinnnus
2024-12-21hosts/ahmed: Update nixpkgs inputs when rebootingLinnnus
2024-12-21ahmed: Remove unused duksebot moduleLinnnus
2024-12-21Move to a profile-based configuration where commonLinnnus
This patch makes it so common configuration is now located in shared/ and each host basically just becomes a bunch of import statements. The exception here is host-specific configuration like the `*.linus.onl` that live inside `hosts/ahmed/`. Specifically I have: - moved common configuration `shared/{nixos,home-manager,nix-darwin}`. - moved `hosts/common.nix` to `shared/nixos/common-{nix,shell}-settings.nix`. - split `hosts/muhammed/{dev-utils,neovim}` into per-language configuration. This patch was done in preparation for the arrival of a new host, which will need to share a lot of configuration with Muhammed.
2024-12-17ahmed: Switch torrenting to new VPN configurationLinnnus
2024-12-16ahmed: Remove old laptop-specific screen disabling serviceLinnnus
2024-12-16ahmed: Allow SSH connections from iPhoneLinnnus
2024-12-06ahmed: Become remote x86_64-linux builderLinnnus
2024-12-06ahmed/torrenting: Use unstable qBittorrent (security)Linnnus
2024-12-06fix: Update git patches for 2.47.0Linnnus
2024-11-25ahmed: Rebuild from GitHubLinnnus
This is a bit of an experiment. With this approach, I should be able to remotely and asynchronously update this host.
2024-10-02chore: FormattingLinnnus
2024-10-02ahmed: Rebuild linus.onl on webhook instead of timerLinnnus
2024-10-01qbittorent: Fix creation logicLinnnus
After attempting to use this configuration on another device, it turns out that the persistent data directories were being created with the wrong permissions.
2024-09-28Run CGit as unpriveledged userLinnnus
2024-08-27ahmed: Don't attempt to fetch linus.onl source before network is onlineLinnnus
I thought this restriction was already being enforced since I set systemd.services."${domain}-source".after = ["network-online.target"] but that apparently wasn't enough. I had to also ensure the timer, which triggered the service was ordered after "network-online.target".
2024-08-01chore ass formattingLinnnus
2024-07-31ahmed: Enable automatic upgradesLinnnus
2024-07-31ahmed: Fix Git cloneLinnnus
CGit farms out the handling of the HTTP requests sent by the Git CLI to another CGI script. This script was failing because of "dubious ownership". This is a security check run by Git to ensure malicious repositories on network drives don't get arbitrary code execution. The problem is: the CGI script was running as root, as that is what the fcgiwrap systemd service was configured for, but the repository is owned by the 'git' user. Since I trust the repositories, I had to patch Git to ignore this mark. Actually getting the NixOS CGit module to use the patched version of Git proved rather difficult... In the future I should probably a) Make sure fcgiwrap isn't running as root since it directly interacts with all sorts of untrusted user input. b) Remove this ugly hack. There's a reason for the security check after all. Just because it matters _less_ in this case doesn't mean it's wise to ignore it completely.
2024-07-06ahmed: FormattingLinnnus
2024-05-19torrenting: Add dark mode to portalLinnnus
The white background is pretty eye-soaring at night. This patch fixes this issue by using a CSS query parameter to set darker styles when dark mode is enabled. See: https://css-tricks.com/dark-modes-with-css/
2024-05-19torrenting: Add "Stand-up" categoryLinnnus
2024-05-09torrenting: Add funny namesLinnnus
2024-05-09Remove forsvarsarperLinnnus
2024-05-09hosts/ahmed/torrenting: Add categoriesLinnnus
2024-05-09hosts/ahmed/git.linus.onl: Syntax highlight itemsLinnnus
2024-05-09torrenting: Create different categories of downloadsLinnnus
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-08 07:28:49 +0000